019296854776e5f8d4d444f95412fb2eb4cc2d482db30e973c57f80cc61e0ca4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

019296854776e5f8d4d444f95412fb2eb4cc2d482db30e973c57f80cc61e0ca4
Size

64KB
Sample

240824-ws29nsvcpn
MD5

579bf38f32d58b5d89caa2d04b5bcae9
SHA1

8557f4cbf2cd25e4cedbedaf9fe459a102b9e7e7
SHA256

019296854776e5f8d4d444f95412fb2eb4cc2d482db30e973c57f80cc61e0ca4
SHA512

7bd54a0b60e4f5dd0f22b5527bebc967c48f1204cf6502f0ef45c5b8e9c0d68396a672448f32a690883caa2b1fc696024282de3b5ec07cdc6bf84cde2782524b
SSDEEP

1536:wwNIpo4PL+IA9BGVBqjzRTXa2Lz+AMCeW:wUIpo4SZFrnipW

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  019296854776e5f8d4d444f95412fb2eb4cc2d482db30e973c57f80cc61e0ca4
- Size
  
  64KB
- MD5
  
  579bf38f32d58b5d89caa2d04b5bcae9
- SHA1
  
  8557f4cbf2cd25e4cedbedaf9fe459a102b9e7e7
- SHA256
  
  019296854776e5f8d4d444f95412fb2eb4cc2d482db30e973c57f80cc61e0ca4
- SHA512
  
  7bd54a0b60e4f5dd0f22b5527bebc967c48f1204cf6502f0ef45c5b8e9c0d68396a672448f32a690883caa2b1fc696024282de3b5ec07cdc6bf84cde2782524b
- SSDEEP
  
  1536:wwNIpo4PL+IA9BGVBqjzRTXa2Lz+AMCeW:wUIpo4SZFrnipW
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence